NVD

Id
43822  
Name
CVE-2012-1964  
Description
The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.10 does not properly handle attempted clickjacking of the about:certerror page, which allows man-in-the-middle attackers to trick users into adding an unintended exception via an IFRAME element.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-07-18  
Modified Date
2014-10-10  
Seq
2012-1964  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
220183 43822 CVE-2012-1964 SUSE-SU-2012:0895  View
220184 43822 CVE-2012-1964 SUSE-SU-2012:0896  View
220185 43822 CVE-2012-1964 openSUSE-SU-2012:0899  View
220186 43822 CVE-2012-1964 oval:org.mitre.oval:def:16783  View
220187 43822 CVE-2012-1964 RHSA-2012:1088  View
220188 43822 CVE-2012-1964 http://www.mozilla.org/security/announce/2012/mfsa2012-54.html  View
220189 43822 CVE-2012-1964 USN-1509-1  View
220190 43822 CVE-2012-1964 USN-1509-2  View
220191 43822 CVE-2012-1964 https://bugzilla.mozilla.org/show_bug.cgi?id=633691  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27428 JVNDB-2012-003135 複数の Mozilla 製品における意図しない例外を追加させられる脆弱性 複数の Mozilla 製品 の browser/components/certerror/content/aboutCertError.xhtml 内の証明書警告機能は、about:certerror ページにおけるクリックジャッキング攻撃の試行を適切に処理しないため、ユーザが意図しない例外を追加させられる脆弱性が存在します。 CVE-2012-1964 55202 CVE-2012-1964 43822 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003135.html 2012-07-17 2012-12-14 View